General

  • Target

    03bfad40f264d3a6d54acc35a28add2b_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240427-166w8shg28

  • MD5

    03bfad40f264d3a6d54acc35a28add2b

  • SHA1

    d17775cb77a08e936a5fb0339da9418edeb742c1

  • SHA256

    7601b15ee13b436035662e8cab05ec461929c22b79f4ce3fd8332b6552cdf69d

  • SHA512

    7ce4a57a3f78948b1fbc54aab5e47f28cbf6d010dfe43da2dae37742c31c31edd4067aab81df630138d059df6bcb006776d17dad95a2db82984433b98b6f3366

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOV52:NAB9

Score
10/10

Malware Config

Targets

    • Target

      03bfad40f264d3a6d54acc35a28add2b_JaffaCakes118

    • Size

      1.9MB

    • MD5

      03bfad40f264d3a6d54acc35a28add2b

    • SHA1

      d17775cb77a08e936a5fb0339da9418edeb742c1

    • SHA256

      7601b15ee13b436035662e8cab05ec461929c22b79f4ce3fd8332b6552cdf69d

    • SHA512

      7ce4a57a3f78948b1fbc54aab5e47f28cbf6d010dfe43da2dae37742c31c31edd4067aab81df630138d059df6bcb006776d17dad95a2db82984433b98b6f3366

    • SSDEEP

      49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p/pOV52:NAB9

    Score
    10/10
    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

    • XMRig Miner payload

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v13

Tasks